Answer
The Sterling supplicant is based on the open-source wpa_supplicant and is also provided as an open-source package.
We update the source and patch as needed to make sure we are up to date on the latest CVEs.
It also goes through our QA validation process with each production release of backports and firmware. For more information, see the release notes on GitHub: